cluster

commit 3db6bebbf8ef01fc9a5f96290b4d45d6139be8b0
parent 47141fdbe47d4b78f2fa71656ff2bc3dee2f52cf
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Mon, 23 Mar 2026 17:32:11 +0100

lets not use ldap

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
apps/talos_cluster/stalwart/release.yaml
 | 
26
++++----------------------

1 file changed, 4 insertions(+), 22 deletions(-)
diff --git a/apps/talos_cluster/stalwart/release.yaml b/apps/talos_cluster/stalwart/release.yaml
@@ -139,7 +139,7 @@ spec:
         blob: s3blob
         fts: db
         lookup: db
-        directory: ldap
+        directory: default
 
       store:
         db:
@@ -159,27 +159,9 @@ spec:
 
       # ── Directory (Authentik LDAP) ───────────────────────────────────────
       directory:
-        ldap:
-          type: ldap
-          url: ldap://ldap.midnightthoughts.space:389
-          base-dn: dc=ldap,dc=midnightthoughts,dc=space
-          bind:
-            dn: cn=stalwart-bind,ou=users,dc=ldap,dc=midnightthoughts,dc=space
-            secret: "%{env:LDAP_BIND_SECRET}%"
-            auth:
-              enable: true
-              method: lookup
-          filter:
-            name: "(&(objectClass=user)(|(cn=?)(mail=?)))"
-            email: "(&(objectClass=user)(|(mail=?)(mailAlias=?)))"
-          attributes:
-            name: cn
-            class: objectClass
-            secret: userPassword
-            groups:
-              - memberOf
-            email: mail
-            email-alias: mailAlias
+        default:
+          type: internal
+          store: db
 
       # ── Listeners (proxy-protocol from Envoy Gateway) ────────────────────
       server: